Attachment 1976389 Details for Bug 2223775 – ssp operator rules

ssp operator rules

(cnv-tests-4-14-py3.11) debaratibasu-nag@Debaratis (text/plain), 11.33 KB, created by Debarati Basu-Nag on 2023-07-18 20:18:09 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Debarati Basu-Nag

Created: 2023-07-18 20:18:09 UTC

Size: 11.33 KB

patch

obsolete

>(cnv-tests-4-14-py3.11) debaratibasu-nag@Debaratis-MacBook-Pro cnv-tests % oc get csv -n openshift-cnv  kubevirt-hyperconverged-operator.v4.14.0 -o json | jq ".spec.install.spec.clusterPermissions[3]"
>{
>  "rules": [
>    {
>      "apiGroups": [
>        ""
>      ],
>      "resources": [
>        "endpoints",
>        "pods"
>      ],
>      "verbs": [
>        "get",
>        "list",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        ""
>      ],
>      "resources": [
>        "services"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "*"
>      ],
>      "resources": [
>        "configmaps"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "list",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "*"
>      ],
>      "resources": [
>        "persistentvolumeclaims"
>      ],
>      "verbs": [
>        "*"
>      ]
>    },
>    {
>      "apiGroups": [
>        "*"
>      ],
>      "resources": [
>        "pods"
>      ],
>      "verbs": [
>        "create"
>      ]
>    },
>    {
>      "apiGroups": [
>        "*"
>      ],
>      "resources": [
>        "secrets"
>      ],
>      "verbs": [
>        "*"
>      ]
>    },
>    {
>      "apiGroups": [
>        "admissionregistration.k8s.io"
>      ],
>      "resources": [
>        "validatingwebhookconfigurations"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "apiextensions.k8s.io"
>      ],
>      "resources": [
>        "customresourcedefinitions"
>      ],
>      "verbs": [
>        "get",
>        "list",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "apps"
>      ],
>      "resources": [
>        "deployments"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "authentication.k8s.io"
>      ],
>      "resources": [
>        "tokenreviews"
>      ],
>      "verbs": [
>        "create"
>      ]
>    },
>    {
>      "apiGroups": [
>        "authorization.k8s.io"
>      ],
>      "resources": [
>        "subjectaccessreviews"
>      ],
>      "verbs": [
>        "create"
>      ]
>    },
>    {
>      "apiGroups": [
>        "cdi.kubevirt.io"
>      ],
>      "resources": [
>        "dataimportcrons"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "cdi.kubevirt.io"
>      ],
>      "resources": [
>        "datasources"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "cdi.kubevirt.io"
>      ],
>      "resources": [
>        "datavolumes"
>      ],
>      "verbs": [
>        "*",
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "cdi.kubevirt.io"
>      ],
>      "resources": [
>        "datavolumes/source"
>      ],
>      "verbs": [
>        "create"
>      ]
>    },
>    {
>      "apiGroups": [
>        "config.openshift.io"
>      ],
>      "resources": [
>        "clusterversions",
>        "infrastructures"
>      ],
>      "verbs": [
>        "get",
>        "list",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        ""
>      ],
>      "resources": [
>        "configmaps",
>        "serviceaccounts",
>        "services"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        ""
>      ],
>      "resources": [
>        "namespaces"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        ""
>      ],
>      "resources": [
>        "persistentvolumeclaims"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        ""
>      ],
>      "resources": [
>        "persistentvolumeclaims/status"
>      ],
>      "verbs": [
>        "get",
>        "list",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        ""
>      ],
>      "resources": [
>        "serviceaccounts"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        ""
>      ],
>      "resources": [
>        "serviceaccounts",
>        "services"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "instancetype.kubevirt.io"
>      ],
>      "resources": [
>        "virtualmachineclusterinstancetypes"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "instancetype.kubevirt.io"
>      ],
>      "resources": [
>        "virtualmachineclusterpreferences"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "kubevirt.io"
>      ],
>      "resources": [
>        "virtualmachineinstances"
>      ],
>      "verbs": [
>        "get",
>        "list",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "kubevirt.io"
>      ],
>      "resources": [
>        "virtualmachineinstances",
>        "virtualmachines"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "kubevirt.io"
>      ],
>      "resources": [
>        "virtualmachines"
>      ],
>      "verbs": [
>        "get",
>        "list",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "kubevirt.io"
>      ],
>      "resources": [
>        "virtualmachines/finalizers"
>      ],
>      "verbs": [
>        "*"
>      ]
>    },
>    {
>      "apiGroups": [
>        "monitoring.coreos.com"
>      ],
>      "resources": [
>        "prometheusrules",
>        "servicemonitors",
>        "services"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "rbac.authorization.k8s.io"
>      ],
>      "resources": [
>        "clusterrolebindings",
>        "clusterroles"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "rbac.authorization.k8s.io"
>      ],
>      "resources": [
>        "clusterroles",
>        "rolebindings"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "rbac.authorization.k8s.io"
>      ],
>      "resources": [
>        "clusterroles",
>        "rolebindings",
>        "roles"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "rbac.authorization.k8s.io"
>      ],
>      "resources": [
>        "rolebindings"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "rbac.authorization.k8s.io/v1"
>      ],
>      "resources": [
>        "role",
>        "rolebinding",
>        "serviceaccount"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "route.openshift.io"
>      ],
>      "resources": [
>        "routes"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "ssp.kubevirt.io"
>      ],
>      "resources": [
>        "kubevirtcommontemplatesbundles"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "ssp.kubevirt.io"
>      ],
>      "resources": [
>        "kubevirtmetricsaggregations"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "ssp.kubevirt.io"
>      ],
>      "resources": [
>        "kubevirttemplatevalidators"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "ssp.kubevirt.io"
>      ],
>      "resources": [
>        "ssps"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "ssp.kubevirt.io"
>      ],
>      "resources": [
>        "ssps/finalizers"
>      ],
>      "verbs": [
>        "update"
>      ]
>    },
>    {
>      "apiGroups": [
>        "ssp.kubevirt.io"
>      ],
>      "resources": [
>        "ssps/status"
>      ],
>      "verbs": [
>        "get",
>        "patch",
>        "update"
>      ]
>    },
>    {
>      "apiGroups": [
>        "subresources.kubevirt.io"
>      ],
>      "resources": [
>        "virtualmachines/restart",
>        "virtualmachines/start",
>        "virtualmachines/stop"
>      ],
>      "verbs": [
>        "update"
>      ]
>    },
>    {
>      "apiGroups": [
>        "tekton.dev"
>      ],
>      "resources": [
>        "clustertasks",
>        "tasks"
>      ],
>      "verbs": [
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update"
>      ]
>    },
>    {
>      "apiGroups": [
>        "tekton.dev"
>      ],
>      "resources": [
>        "pipelines"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "tekton.dev"
>      ],
>      "resources": [
>        "tasks"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    },
>    {
>      "apiGroups": [
>        "template.openshift.io"
>      ],
>      "resources": [
>        "processedtemplates"
>      ],
>      "verbs": [
>        "create"
>      ]
>    },
>    {
>      "apiGroups": [
>        "template.openshift.io"
>      ],
>      "resources": [
>        "templates"
>      ],
>      "verbs": [
>        "create",
>        "delete",
>        "get",
>        "list",
>        "patch",
>        "update",
>        "watch"
>      ]
>    }
>  ],
>  "serviceAccountName": "ssp-operator"
>}

Actions: View

Attachments on bug 2223775: 1976389